Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/jr1Jxa-aEgioppy6ialKOB30Lnc.roa
File: jr1Jxa-aEgioppy6ialKOB30Lnc.roa (raw, json)
Hash identifier: /PaSSplIzzd3qx5k61hV9mveS/zpr602so4qjeTOEJo=
Subject key identifier: 8E:BD:49:C5:AF:9A:12:08:A8:A6:9C:BA:89:A9:4A:38:1D:F4:2E:77
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01931D60989188E04F2E6A589C5F1AE79004
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/jr1Jxa-aEgioppy6ialKOB30Lnc.roa
Signing time: Mon 11 Nov 2024 22:38:10 +0000
ROA not before: Mon 11 Nov 2024 22:38:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207083
IP address blocks: 2a0a:c3c5:9000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 12 Nov 2024 19:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1d:60:98:91:88:e0:4f:2e:6a:58:9c:5f:1a:e7:90:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Nov 11 22:38:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ebd49c5af9a1208a8a69cba89a94a381df42e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:80:cc:78:02:a8:1d:1b:1e:08:f0:ed:29:43:
8b:3a:15:65:19:eb:3f:da:1f:5b:2f:33:e8:90:24:
3b:8a:02:15:e4:31:1a:6d:27:41:6d:7d:e4:cc:e3:
15:a4:75:a1:2a:ae:e6:c1:7b:70:3a:1a:49:51:ae:
ec:8b:aa:55:13:3d:ca:e2:b1:70:e6:02:28:88:b0:
aa:14:0d:73:d6:98:a0:80:ba:30:d7:f4:42:6a:7c:
0d:43:a8:78:19:42:26:b6:b8:71:b7:6c:c7:9d:ca:
7a:12:60:30:9b:35:50:35:e7:e2:db:2b:22:a4:6f:
2e:77:e9:a8:f1:60:92:2e:99:ff:83:e5:7a:6b:e8:
6d:38:b2:f0:b7:dd:fb:2f:71:7b:a3:40:b2:31:92:
32:b3:53:a9:6c:ea:cf:09:80:aa:fd:9e:79:97:20:
a7:48:d6:44:f0:93:25:22:c9:50:49:32:f4:12:70:
16:16:f1:8e:77:bc:d1:11:f2:dc:10:81:cb:52:07:
a9:a4:44:cc:6d:a3:48:32:e2:fd:bc:48:ea:0c:9c:
71:84:fd:1a:54:a3:ca:52:cd:d5:f1:4d:0e:2d:2d:
b7:14:07:3b:92:3a:ac:6e:e9:7f:19:fd:d0:10:02:
fe:0c:d3:d0:1e:61:0e:c3:a9:67:37:90:a9:18:9a:
14:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BD:49:C5:AF:9A:12:08:A8:A6:9C:BA:89:A9:4A:38:1D:F4:2E:77
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/jr1Jxa-aEgioppy6ialKOB30Lnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:c3c5:9000::/36
Signature Algorithm: sha256WithRSAEncryption
b4:d2:62:f9:90:d6:47:36:f2:17:e6:97:93:04:22:7e:a0:5a:
29:89:a3:ad:50:ae:e3:16:13:a6:43:04:7c:b4:55:01:73:67:
34:f2:7e:cf:9b:96:b6:29:01:d1:c2:17:05:93:99:f3:bd:97:
20:cb:20:9c:59:ca:dc:77:ac:83:cd:34:ce:35:99:21:7b:ce:
01:d8:dd:7a:a0:8e:79:66:e6:10:aa:be:61:e6:16:cd:4b:e8:
54:99:11:e4:77:8b:f2:d8:02:0e:62:7d:c0:f4:5a:c8:cf:a5:
d1:cc:de:e5:7e:1f:6a:93:6d:fb:07:01:f2:62:97:04:77:91:
80:25:21:5a:4c:4e:3f:9f:18:19:43:f6:91:a5:09:7c:14:62:
50:97:49:6e:98:c5:79:05:fd:33:20:87:ec:7b:fe:8c:52:be:
b4:95:37:9f:9c:ab:37:87:db:51:83:b4:60:55:62:bd:2f:ca:
ee:15:c3:ba:b1:c7:fb:3f:ed:f5:07:d7:9b:b9:88:6c:ad:c1:
0e:f8:bb:6b:32:44:cf:ef:50:c5:d0:7b:a5:5f:54:96:82:d6:
b3:d4:8e:37:fc:cd:18:75:3b:18:11:15:29:be:f8:1a:52:e7:
23:31:10:c4:ae:0a:bf:34:b0:4e:d7:d2:6f:2e:ee:2a:89:c5:
2e:d8:f9:27
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZMdYJiRiOBPLmpYnF8a55AEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjQxMTExMjIzODEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWJkNDljNWFmOWExMjA4YThhNjljYmE4OWE5NGEzODFkZjQyZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4DMeAKoHRseCPDtKUOLOhVlGes/
2h9bLzPokCQ7igIV5DEabSdBbX3kzOMVpHWhKq7mwXtwOhpJUa7si6pVEz3K4rFw
5gIoiLCqFA1z1piggLow1/RCanwNQ6h4GUImtrhxt2zHncp6EmAwmzVQNefi2ysi
pG8ud+mo8WCSLpn/g+V6a+htOLLwt937L3F7o0CyMZIys1OpbOrPCYCq/Z55lyCn
SNZE8JMlIslQSTL0EnAWFvGOd7zREfLcEIHLUgeppETMbaNIMuL9vEjqDJxxhP0a
VKPKUs3V8U0OLS23FAc7kjqsbul/Gf3QEAL+DNPQHmEOw6lnN5CpGJoUhQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFI69ScWvmhIIqKacuompSjgd9C53MB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvanIxSnhhLWFFZ2lvcHB5NmlhbEtPQjMwTG5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgrDxZAw
DQYJKoZIhvcNAQELBQADggEBALTSYvmQ1kc28hfml5MEIn6gWimJo61QruMWE6ZD
BHy0VQFzZzTyfs+blrYpAdHCFwWTmfO9lyDLIJxZytx3rIPNNM41mSF7zgHY3Xqg
jnlm5hCqvmHmFs1L6FSZEeR3i/LYAg5ifcD0WsjPpdHM3uV+H2qTbfsHAfJilwR3
kYAlIVpMTj+fGBlD9pGlCXwUYlCXSW6YxXkF/TMgh+x7/oxSvrSVN5+cqzeH21GD
tGBVYr0vyu4Vw7qxx/s/7fUH15u5iGytwQ74u2syRM/vUMXQe6VfVJaC1rPUjjf8
zRh1OxgRFSm++BpS5yMxEMSuCr80sE7X0m8u7iqJxS7Y+Sc=
-----END CERTIFICATE-----
Generated at Tue Nov 12 20:49:34 2024 by rpki-client on console-fra.rpki-client.org